
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/1794902224E111EF97BA8F42C4F9AE02.roa
File: 1794902224E111EF97BA8F42C4F9AE02.roa (raw, json)
Hash identifier: Yq+GDOgPjYfjlCH3DOObesHj7a3fvejOrl/4IRRx/CI=
Subject key identifier: C2:2B:84:C8:F2:67:81:CD:17:1E:E5:BD:13:B8:BF:D2:B5:62:2E:72
Certificate issuer: /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Certificate serial: 0CBE
Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/1794902224E111EF97BA8F42C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:41:18 +0000
ROA not before: Sat 26 Apr 2025 18:57:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138640
IP address blocks: 103.137.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3262 (0xcbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Validity
Not Before: Apr 26 18:57:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a425de-f24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:83:6a:c6:8b:64:c9:73:ee:43:2c:b6:7c:
2e:4b:4d:e4:e0:b2:06:70:fa:fd:b6:42:cc:c1:de:
2b:b0:44:74:db:04:b3:9c:a6:ed:e8:d0:df:de:f4:
34:e1:6e:d4:db:eb:c8:53:b6:c0:8c:c1:bb:99:0a:
66:f0:d8:9a:99:52:2e:ee:91:71:87:30:aa:73:18:
6c:10:31:8e:41:e3:68:ac:71:c2:8f:4f:56:29:a8:
8b:d1:9e:76:7e:7b:b2:09:19:93:cb:30:e8:cb:48:
00:76:8f:8b:25:23:c7:02:ea:97:a6:70:84:e8:03:
02:3b:3c:d7:e1:95:3f:6b:b3:a8:0d:28:5a:dd:6a:
61:d6:b0:c8:fc:4a:d5:3e:0c:b3:c7:aa:84:5d:d2:
2d:0c:59:0d:71:fc:9b:bd:57:26:f4:8a:ce:9d:0a:
c3:77:c7:44:10:0c:ba:d7:41:e8:94:72:6c:a1:fd:
66:30:b2:6b:88:d0:1f:d3:b4:91:07:d4:c2:ee:cc:
d0:45:b1:0d:ac:5b:b8:17:2e:ca:07:7e:c3:fd:14:
f4:cb:cb:93:52:63:3f:53:7a:93:1e:74:56:67:e5:
1d:d5:4b:a2:4b:87:c3:d2:77:a6:10:aa:80:4d:41:
c0:bf:c4:b2:ce:4c:aa:96:49:39:09:d8:5d:a9:60:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2B:84:C8:F2:67:81:CD:17:1E:E5:BD:13:B8:BF:D2:B5:62:2E:72
X509v3 Authority Key Identifier:
keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/1794902224E111EF97BA8F42C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.161.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:a6:ea:5b:fc:c6:de:51:92:c4:84:1d:f2:b7:29:70:3c:87:
81:53:01:cb:1a:24:71:42:f7:cf:7f:7f:c6:31:3b:4d:cb:09:
a0:b7:4e:91:ba:e8:ab:39:5b:bf:09:bb:50:29:e9:fa:80:5e:
f5:91:0d:bc:9f:a8:2e:45:17:56:9b:22:e6:75:18:e7:70:73:
fa:33:34:60:42:0f:0b:d4:c8:fe:03:fc:8b:5d:55:6d:62:d5:
c1:a0:83:c8:68:21:2a:c3:6a:72:ee:0e:1e:ab:2d:f7:20:93:
a9:c8:47:08:3a:6b:71:bd:09:36:ef:b1:16:2a:34:75:14:b5:
39:62:59:69:5c:40:de:bf:97:af:c9:e2:25:d5:7c:60:d0:f4:
f5:77:e1:f4:a4:88:ab:ce:fd:ed:19:dc:82:0f:67:f9:43:c6:
ca:eb:bc:24:db:7c:c6:ea:8e:6c:d1:48:b4:4c:7d:05:4b:71:
84:7b:3e:14:40:23:ad:f7:d6:44:c4:95:67:8e:fe:28:1f:e4:
fd:72:7b:6a:87:9f:d8:ce:3d:e6:14:95:61:5d:0c:80:25:4b:
06:33:c7:21:ab:d6:90:dd:81:36:65:14:d2:8b:70:b5:41:9c:
87:de:33:87:96:a5:34:cd:dc:b4:61:db:92:7c:d1:3a:ee:22:
af:36:80:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:11 2026 by rpki-client